CVE-2026-111406Critical· 9.9▾ MidnightUnrestricted Upload of File with Dangerous Type vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Upload a Web Shell to a Web Server.This issue affects MapSVG: from n/a through 8.16.1.
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 54.5 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Unrestricted Upload of File with Dangerous Type vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Upload a Web Shell to a Web Server.This issue affects MapSVG: from n/a through 8.16.1.
mapsvg-lite-interactive-vector-maps <= 8.16.1Update the WordPress MapSVG plugin to the latest available version (at least 8.16.2).
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-111398High· 7.7WordPress MapSVG plugin <= 8.16.1 - Arbitrary File Deletion vulnerability
CVE-2026-111397Medium· 5.3WordPress MapSVG plugin <= 8.16.1 - Sensitive Data Exposure vulnerability
CVE-2026-111405Medium· 6.5WordPress MapSVG plugin <= 8.16.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-111399High· 8.5WordPress MapSVG plugin <= 8.16.1 - SQL Injection vulnerability
CVE-2025-14199Medium· 6.3A flaw has been found in Verysync 微力同步 up to 2.21.3
CVE-2025-11347High· 7.3A vulnerability was found in code-projects Student Crud Operation up to 3.3